Warning: TradePulse script has a vulnerability

[DarkJedi]

Apparently Trade Pulse script has some hole and a lot of people have been victims of infection.

Someone injects a code into websites that use TradePulse, which redirects US people to some shady affiliate programs.

Discussion here: http://forum.scriptpulse.com/index.p...ic,1260.0.html

Screenshot of the injected code: http://clip2net.com/s/1am55

One of the programs that accepts this stolen traffic: http://www.ptp123.com/


Script developers still can't find a way to fix it.

[blackmonsters]

Apparently Trade Pulse script has some hole and a lot of people have been victims of infection.

Someone injects a code into websites that use TradePulse, which redirects US people to some shady affiliate programs.

Discussion here: http://forum.scriptpulse.com/index.p...ic,1260.0.html

Screenshot of the injected code: http://clip2net.com/s/1am55

One of the programs that accepts this stolen traffic: http://www.ptp123.com/


Script developers still can't find a way to fix it.

If the developers can't fix the script then it might not be the script.
Servers can be insecure also.
The script would be the obvious thing to attack once the server is already hacked.

[DarkJedi]

If the developers can't fix the script then it might not be the script.
Servers can be insecure also.
The script would be the obvious thing to attack once the server is already hacked.

Idiot.

/facepalm

[Dubya]

Switch your sites to TE DJ.

[blackmonsters]

Idiot.

/facepalm

Yeah right.

I thought a script was being hacked but changed hosting because it was found that
the server was being hacked through SSH. They had an old version installed.

And try reading the word "might" in my post.


Foolish idiot.

[Matyko]

any news about this one? where is the author? where are the webmasters affected by this?
I just got my first 8-10 TP installs to test if its ok for us or not... --> Wipe?

[Adraco]

any news about this one? where is the author? where are the webmasters affected by this?
I just got my first 8-10 TP installs to test if its ok for us or not... --> Wipe?

I would definitely wipe everything, just to be safe, as long as it's any sites you care for and want to treat good.